Skip to content
OpenAdvisories
Critical RHSA-2026:85926 8 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 tomcat10 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-admin-webapps 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-common 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-docs-webapp 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-el-5.0-api 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-jsp-3.1-api 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-lib 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-servlet-6.0-api 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-user-instance 0:10.1.61-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 tomcat10-webapps 0:10.1.61-0.1.hum1

Vulnerabilities 8

  • Critical 9.1
    CVE-2026-101356

    Apache Tomcat: HTTP/2 request/response mix-up after error during async processing

    Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 th…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Critical 9.1
    CVE-2026-103119

    Apache Tomcat: AJP response mix-up

    Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second requ…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 8.1
    CVE-2026-101296

    Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms

    A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apach…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 8.1
    CVE-2026-80353

    Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector

    Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the N…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.5
    CVE-2026-88041

    Apache Tomcat: HTTP/2 trailer header cross-contamination

    Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu
  • High 7.5
    CVE-2026-93446

    Apache Tomcat: Possible TLS 1.3 connection failures

    Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended to up…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Medium 6.5
    CVE-2026-74048

    Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up

    Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. T…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Medium 6.1
    CVE-2026-74049

    Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

    Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122. The following versions were EOL at the time the CVE was created but…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-103119
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-74048
  • report
    https://access.redhat.com/security/cve/CVE-2026-101356
  • report
    https://access.redhat.com/security/cve/CVE-2026-74049
  • report
    https://access.redhat.com/security/cve/CVE-2026-101296
  • report
    https://access.redhat.com/security/cve/CVE-2026-88041
  • report
    https://access.redhat.com/security/cve/CVE-2026-80353
  • report
    https://access.redhat.com/security/cve/CVE-2026-93446
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85926.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-74048
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-74048
  • article
    https://lists.apache.org/thread.html/v5ry0sx1c7x1wr5mx4cddj3p3mv1ho6m
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556184
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-74049
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-74049
  • article
    https://lists.apache.org/thread.html/lolc9wo4tzjog2tnwctv93hz9gjcdnc6
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556183
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-80353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-80353
  • article
    https://lists.apache.org/thread.html/tr0q87qwvs80p9hc53tkwpzvnx0ywftr
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88041
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88041
  • article
    https://lists.apache.org/thread.html/dnmm9l3byytg3l66nk1jrqfrl7jty7n1
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556181
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-93446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-93446
  • article
    https://lists.apache.org/thread.html/zh87okr5qspv4byzfpy2w6dqrokrnxzw
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556187
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-101296
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-101296
  • article
    https://lists.apache.org/thread.html/bl52b9go9ckoov8x4v3dt6rkm573cygd
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2556186
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-101356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-101356
  • article
    https://lists.apache.org/thread.html/d1xjt7bbjqw7y7n5mcb4fm815hpfgc27